The Barangay Resident Profiling Management System 1.0 contains an authorization bypass vulnerability in the /archived_records.php file within the Restore/Delete component. This flaw arises from improper validation of the resident_id argument, enabling an attacker with low privileges to bypass authorization controls remotely. The vulnerability is tracked as CVE-2026-78142 and has a CVSS 3.1 base score of 6.3, indicating a medium severity impact on confidentiality, integrity, and availability. Exploit code has been publicly released, but no official patch or fix has been documented.

Successful exploitation of this vulnerability allows an attacker to bypass authorization checks remotely, potentially leading to unauthorized access or modification of archived resident records. The impact includes limited confidentiality, integrity, and availability loss as indicated by the CVSS vector. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected component and monitor for suspicious activity related to the resident_id parameter. Avoid exposing the vulnerable endpoint to untrusted networks if possible.